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DETAILED ACTION 

1 . Claims 1 1 and 1 3- 1 6 are pending. 

Continued Examination Under 37 CFR 1.114 

A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on March 17, 2006 has been entered. 

Claim Rejections -55 USC §103 
The text of those sections of Title 35, U.S. Code not included in this action can be found 
in a prior Office action. 

2. Claims 1 1 and 15 rejected under 35 U.S.C. 103(a) as being unpatentable over Howell et 
al. (Howell), U.S. Patent No. 5,276,901. 

As per claims 11 and 15: 

Howell substantially teaches a method comprising: 

authenticating a user of the knowledge base (1:32-46, wherein the electronic library is the 
knowledge base); 

determining the clearance level of a requested secure document (6:16-32); 
determining a number of document caveats associated with the requested document (4:8- 
36, 52-64, wherein the object access control type and access list associated with each document 



Application/Control Number: 09/892,281 Page 3 

Art Unit: 2132 

represent necessary conditions for access to the document and are thus a number of document 
caveats); 

for each of the number of document caveats, obtaining the respective document caveat 
for the requested document, the respective document caveat representing a necessary condition 
for access to the document (fig. 4, 5:66-6:42 wherein the access control type and access lists are 
obtained); 

determining the clearance level of the authenticated user (6:16-32); 

determining a number of user caveats of the authenticated user (4:53-64, 5:23-47, 
wherein having access in contingent upon being on the access list and being in a group that has 
access which are necessities for access, thus making them user caveats); 

for each of the number of user caveats, obtaining the respective user caveat representing a 
condition necessary for the authenticated user to have access to a document having an associated 
document caveat (6:6-56); 

comparing the clearance level of the requested document with the clearance level of the 
authenticated user (6:19-23); 

for all combinations of the user caveats and the document caveats, comparing the 
document caveat of the requested document to the user caveat of the authenticated use (fig. 4, 
5:66-7:14); and 

and displaying the secure document to the authenticated user in response to the clearance 
level of the user dominating the clearance level of the requested document and the comparison of 
all combinations of the user caveats to the document caveats (5:66-7:14). 
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3. Claims 13, 14 and 16 rejected under 35 U.S.C. 103(a) as being unpatentable over Howell 
(5,276,901) as applied to claims 1 1 and 15 above, in view of Erickson, U.S. Patent No. 
5,765,152. 

As per claim 13: 

Howell fails to teach a method further comprising encrypting and signing the 
authenticated user. However, Erickson discloses a method wherein the user must have a digital 
signature (21:34-37). 

It would have been obvious to one of ordinary skill in the art at the time of applicant's 
invention to require the user to present a digital signature because this would add an extra layer 
of security and prevent someone from stealing the actual user's identity. 

As per claim 14: 

Howell fails to teach a method wherein authenticating a user comprises a certificate 
authority program running on a server. However, Erickson discloses a method wherein a user's 
digital signature, signed by a certification authority, is used to authenticate the user (21 :40-45). 

It would have been obvious to one of ordinary skill in the art at the time of applicant's 
invention to use a certification authority when authenticating a user because the unique code the 
authority uses becomes apparent before anything is encrypted to the key which can only be 
signed by the individual using the matching key (21 :45-48). Therefore, the certification 
authority acts as a trusted third party wherein when it verifies something, both sides can be sure 
that it is authentic. 

As per claim 16: 
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Howell fails to teach a method further comprising multiple authentication of a user. 
However, Erickson discloses a method comprising multiple authentication of a user prior to 
comparing the clearance level of the requested document with the clearance level of the 
authenticated user (24:4551). 

It would have been obvious to one of ordinary skill in the art at the time of applicant's 
invention to require the user to go through multiple authentication in order to ensure the user's 
identity and prevent identity theft. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kristin Derwich whose telephone number is 571-272-7958. The 
examiner can normally be reached on Monday - Friday, 8:00-5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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